-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 05 Apr 2026 00:33:31 +0100 Source: openssh Binary: openssh-client openssh-client-dbgsym openssh-client-udeb openssh-server openssh-server-dbgsym openssh-server-udeb openssh-sftp-server openssh-sftp-server-dbgsym openssh-tests openssh-tests-dbgsym ssh-askpass-gnome ssh-askpass-gnome-dbgsym Architecture: armhf Version: 1:9.2p1-2+deb12u9 Distribution: bookworm-security Urgency: medium Maintainer: arm Build Daemon (arm-conova-03) Changed-By: Colin Watson Description: openssh-client - secure shell (SSH) client, for secure access to remote machines openssh-client-udeb - secure shell client for the Debian installer (udeb) openssh-server - secure shell (SSH) server, for secure access from remote machines openssh-server-udeb - secure shell server for the Debian installer (udeb) openssh-sftp-server - secure shell (SSH) sftp server module, for SFTP access from remot openssh-tests - OpenSSH regression tests ssh-askpass-gnome - interactive X program to prompt users for a passphrase for ssh-ad Closes: 1130595 Changes: openssh (1:9.2p1-2+deb12u9) bookworm-security; urgency=medium . * CVE-2026-3497: Fix incorrect GSS-API error handling; Replace incorrect use of sshpkt_disconnect() with ssh_packet_disconnect(), and properly initialize some variables (closes: #1130595; thanks, Marc Deslauriers). Checksums-Sha1: ccafffa0f37cd768c3e71be87822385320bead1f 3578508 openssh-client-dbgsym_9.2p1-2+deb12u9_armhf.deb 20f76b610cbc152be84f24b10399e346762c8489 343424 openssh-client-udeb_9.2p1-2+deb12u9_armhf.udeb 102d5231422c3cd272715c867e80e0686d3188b5 899236 openssh-client_9.2p1-2+deb12u9_armhf.deb b17a30ba3afebc4649cf2d6bc926fdb2b62b04c0 948080 openssh-server-dbgsym_9.2p1-2+deb12u9_armhf.deb c794654cbf9142a3b321dd50eb938ebb1c03c6db 359820 openssh-server-udeb_9.2p1-2+deb12u9_armhf.udeb b019886fd55c0e08448056cfb6e6613accf1179c 418268 openssh-server_9.2p1-2+deb12u9_armhf.deb d6c6b14a6c74d38fed02c1813f44dfb73fc5e484 168860 openssh-sftp-server-dbgsym_9.2p1-2+deb12u9_armhf.deb 8bab7842f8acaba429ab9d1c6d6ef6686ddd15e4 60604 openssh-sftp-server_9.2p1-2+deb12u9_armhf.deb 2322c331497392de05c2e8dc687c639458aa9bb9 2808212 openssh-tests-dbgsym_9.2p1-2+deb12u9_armhf.deb c8c4175b92a5a0ca5fe6c724b04573210fdc69f3 958184 openssh-tests_9.2p1-2+deb12u9_armhf.deb 7fdd0368a6b93956e1e12a953a8720271a328760 18613 openssh_9.2p1-2+deb12u9_armhf-buildd.buildinfo c803b57e9f1a3d264ae47d17c73a2e9c274042c4 16972 ssh-askpass-gnome-dbgsym_9.2p1-2+deb12u9_armhf.deb 2c3997ad1b7a1d4e252beaf548a156d521d92f04 187696 ssh-askpass-gnome_9.2p1-2+deb12u9_armhf.deb Checksums-Sha256: 1b2370c33e6fafe4abb559b0d93b3988738d7d02e4bfd17d9204e598d9f27622 3578508 openssh-client-dbgsym_9.2p1-2+deb12u9_armhf.deb 6220ec9af875d6df413665942649868c390aec0738664341efec9e1ca9113e31 343424 openssh-client-udeb_9.2p1-2+deb12u9_armhf.udeb 0f451939a4df9d01fc3af49a6225dbf4be4b5c54adbd7a6ce7c5d19861115ec9 899236 openssh-client_9.2p1-2+deb12u9_armhf.deb ee73664a3275707e4b7c7c6ba13fd8b0872c0ff05772115f3ba6f0628f978141 948080 openssh-server-dbgsym_9.2p1-2+deb12u9_armhf.deb bdf51663a190f00db6c57830d271dff934a30db63887aaa2d4563a079d1bf647 359820 openssh-server-udeb_9.2p1-2+deb12u9_armhf.udeb 43a7399dc4621fc98dd86092a2634cd0372e3f00b2fb3baf97ebcc00a406a123 418268 openssh-server_9.2p1-2+deb12u9_armhf.deb a10f0433475b12b30e1374da95c7a3af2f679e36c892fac005e0332891fb5c06 168860 openssh-sftp-server-dbgsym_9.2p1-2+deb12u9_armhf.deb 625742c18ef4beb1382e6292bb0cd787736476dde7dedefb47caa6b4f9c9b481 60604 openssh-sftp-server_9.2p1-2+deb12u9_armhf.deb ce12afa25781abc18049956d608effe22b4fcf9d03c6e9e28ef7dd620da36ff8 2808212 openssh-tests-dbgsym_9.2p1-2+deb12u9_armhf.deb 1e9537af179e68cfb014f311760ac76aa06889392977c599a6c29e9ceb8ef312 958184 openssh-tests_9.2p1-2+deb12u9_armhf.deb 217deaf8c844ea08874f2e77cad9e6c6a43cd364a90274bc43e46397cde15c12 18613 openssh_9.2p1-2+deb12u9_armhf-buildd.buildinfo 9fab9a233f4025317338911af6b07609d569db8ac6a9058b289b5fbc90a62164 16972 ssh-askpass-gnome-dbgsym_9.2p1-2+deb12u9_armhf.deb 799e75c02d73e2baffee7e8fbda6fdaa6f95efd53bb02cf5c101b3b40b4bfdea 187696 ssh-askpass-gnome_9.2p1-2+deb12u9_armhf.deb Files: 0b3e702353ec6f366cdf489dc22d886c 3578508 debug optional openssh-client-dbgsym_9.2p1-2+deb12u9_armhf.deb ae8acc51c8a0f94e003f0bb4d35cf983 343424 debian-installer optional openssh-client-udeb_9.2p1-2+deb12u9_armhf.udeb 99272dd7cbf0e6f71df304c60104f921 899236 net standard openssh-client_9.2p1-2+deb12u9_armhf.deb 08f12217ee0da9d7ad00032831dae7e7 948080 debug optional openssh-server-dbgsym_9.2p1-2+deb12u9_armhf.deb 3a9718d6e1110438af7fcb86d2a28502 359820 debian-installer optional openssh-server-udeb_9.2p1-2+deb12u9_armhf.udeb 26c42e5db6b31338873857942ddfe99c 418268 net optional openssh-server_9.2p1-2+deb12u9_armhf.deb abdddd1b74f9587ef21f7ab400977ced 168860 debug optional openssh-sftp-server-dbgsym_9.2p1-2+deb12u9_armhf.deb 7f21b1c4044949be1964536376395f5d 60604 net optional openssh-sftp-server_9.2p1-2+deb12u9_armhf.deb 0aa327901f3cc077cca99f4222123a9e 2808212 debug optional openssh-tests-dbgsym_9.2p1-2+deb12u9_armhf.deb a7f2cfe054dfda53ef40647eeaa7bc0c 958184 net optional openssh-tests_9.2p1-2+deb12u9_armhf.deb 9de7d617671854ec62eaefe0b042e313 18613 net standard openssh_9.2p1-2+deb12u9_armhf-buildd.buildinfo 46efdf866669e862b853d4f787e6c95d 16972 debug optional ssh-askpass-gnome-dbgsym_9.2p1-2+deb12u9_armhf.deb 73f83e7a6b1c7577422c1d355dd6f7a2 187696 gnome optional ssh-askpass-gnome_9.2p1-2+deb12u9_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEElFiH1oZRZh1t4FSiXVp1sEH/1mIFAmnRp9YACgkQXVp1sEH/ 1mKlhQ//cWdgdCXN3bWdweEHKdCxTOsWnchdT6KuW3gbhbMrGrQ+OprXf2FfIz0C MbpyiyI96xRPSjSSPjhUnsoh9Ybt1BVLcqr+TsQFU/WDJm6RX1Vi0aD8b1UAxCZN UarkBNePEaGTxAWu7Se+FZpFxIxGdi6wc/uiordlE+x8Q/YZ6kGkFDUj3AolttVU Fg+rX2NJqYnUW7Y9oam26KpUfCQqf1Kb5o8LkOORrgDv7ejBS4J/IbWMy9/P11jh mlJyG7U0EFGSLF1hmu9Kx1oc6HmhAxLcsuyqmFZSbIuOvnwoRf/WgB3OCBxmpoD+ lmvZwzpuo65xsvEshhscWgl2gHKKtqRI95LYJmuqqE8ezvEVcZVFyVo/i7pD/5bx 3Db2qKJVkbfJ2KwYx9TV9foRzTTMFzrHqqbNOjlk4/chZpxlGbcL5Mtv/3pjfkFB NUMhDV04ARlg7VhOqNm8dHuFmIGhMx0OCn+Re9IpJRUairhO4X9YitWGY2VjroMP zXUjDyn2w2dT+aSBSSR7vWY1P3EZxrt4xkwFUZICXs/1yNhRFKhh6AeLts/HeDof NCzCyeitK+3bekf+L+G1YbuLaZlE+Apxxtcjcv545LeEpO4M+1bdD8WjymZ/M9eW 0XyWPaez/x9JVbcuYfpmtYRhFybrtAj5EW0r/LQuqSIWXnnly98= =6IiW -----END PGP SIGNATURE-----